Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5S5eikik9Q_xDVx5MYBk01lniUo.roa
File: 5S5eikik9Q_xDVx5MYBk01lniUo.roa (raw, json)
Hash identifier: ngg9Xz2VQXBNpE8NeUsVnB9BQF7D+WB2UavRJ6oDIPs=
Subject key identifier: E5:2E:5E:8A:48:A4:F5:0F:F1:0D:5C:79:31:80:64:D3:59:67:89:4A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2FDC4A3249B7A9048CB0D77DEF89
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5S5eikik9Q_xDVx5MYBk01lniUo.roa
Signing time: Thu 02 Jan 2025 07:48:57 +0000
ROA not before: Thu 02 Jan 2025 07:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 45.150.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2f:dc:4a:32:49:b7:a9:04:8c:b0:d7:7d:ef:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e52e5e8a48a4f50ff10d5c79318064d35967894a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:20:07:4b:3a:2a:45:ce:f7:75:d1:8f:e4:
2c:7c:ed:63:6e:e5:68:62:f7:21:ee:16:ea:11:eb:
26:a0:80:01:ff:2c:75:0c:27:f3:24:41:13:13:a9:
1b:b4:21:99:3d:41:54:82:ad:0f:a8:4d:5a:01:22:
22:e5:c4:37:77:b7:41:c3:8f:e8:45:f3:b0:ed:fe:
df:25:c2:40:36:71:06:ce:9d:79:ec:9c:87:c8:4c:
e5:44:b3:69:f3:bb:ea:89:e8:6c:a9:64:ef:e5:5e:
59:51:81:13:03:f7:11:8a:cc:ef:fc:6b:15:c4:58:
76:1e:0b:06:03:c5:bd:6b:3e:b7:26:c5:bd:4e:f0:
e0:4e:b8:da:29:d7:1b:cb:e5:64:69:00:48:e1:05:
5a:98:74:61:c8:31:dd:d4:a8:af:bc:be:d8:6d:0c:
7e:74:ec:d7:03:c4:a3:55:61:c2:d0:ad:1f:26:fe:
81:c3:2d:8d:76:25:84:05:81:71:30:a6:6b:3e:04:
e3:80:13:d1:8e:a9:38:6d:54:eb:b5:e2:cf:7c:a9:
b4:c4:38:12:52:6b:0d:7f:ec:34:10:ff:06:15:50:
0f:a1:1d:6c:12:e3:96:66:4e:95:bc:fa:b0:bb:16:
f0:4d:1f:bc:19:f1:1c:32:99:3b:1a:ef:e1:cc:08:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2E:5E:8A:48:A4:F5:0F:F1:0D:5C:79:31:80:64:D3:59:67:89:4A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5S5eikik9Q_xDVx5MYBk01lniUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.34.0/24
Signature Algorithm: sha256WithRSAEncryption
07:17:46:bf:ad:89:ab:27:6c:26:67:3a:35:08:de:85:19:de:
d5:b5:b9:99:3d:a1:ce:2f:f7:cc:74:90:e2:98:7b:7a:e3:76:
7b:84:33:2a:9b:71:95:ab:3c:e4:a5:1d:bc:de:35:18:e1:0c:
32:8e:e6:72:bc:de:1a:f8:d5:8b:1f:a8:82:b1:56:3a:1c:46:
3d:56:b4:cf:72:d4:89:e1:cb:66:36:45:8f:18:6d:45:f5:0b:
61:e1:3a:d4:ed:00:06:76:70:d3:8b:cf:06:f6:07:b9:b7:b1:
41:b1:c3:a3:11:c5:7f:48:7b:f9:c5:61:05:7f:4a:e1:e1:1b:
09:73:d6:69:31:34:5b:28:a4:04:bf:fe:04:b8:e8:3e:fe:d4:
e7:84:39:3c:9c:0a:fb:07:85:fa:1f:ee:da:df:f3:35:4a:b4:
a1:d3:93:54:ff:9d:8a:9d:19:74:da:bd:46:ed:c8:c1:68:4f:
99:75:ca:48:be:21:e9:06:d0:e7:4f:74:96:d7:3f:4a:8f:70:
05:f4:f5:8e:78:f6:cb:f7:08:4d:96:cb:de:a8:6e:90:af:6e:
e4:93:f9:0c:cf:6e:5d:4e:e1:4d:a9:1a:cc:da:3a:8a:57:99:
a5:e9:9b:c7:39:f0:33:61:20:76:01:8e:a2:94:6e:6f:1e:67:
05:28:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:52:26 2025 by rpki-client